Security Compliance

Active Directory not detected by Access Rights Manager

The list of Active Directory resources is empty.

First published date

5/7/2021 3:56 PM

Last published date

5/7/2021 3:56 PM

Overview

This article provides a possible fix when the list of Active Directory (AD) resources is empty while trying to create AD Scan. In the log (armServer.log) you will find the following errors:
  
AvailableAccountProviders.enumerateAccountProviders(Action`1 addAccountProviderFunction, String[] licensedDomains): System.AggregateException: One or more errors occurred. ---> System.InvalidOperationException: Operation for Kerberos type trust not supported.

or
  
ConnectorScanHumster`6.ExecuteScan(TJobConnectorScanConfiguration jobScanConfiguration, ManualResetEvent stopEvent): System.DirectoryServices.DirectoryServicesCOMException (0x8007202B): A referral was returned from the server.

Product section

Access Rights Manager

Cause

Unsupported authentication mechanism.

Resolution

To fix the issue follow the steps below:
  1. open pnServer.config.xml (location: c:\ProgramData\protected-networks.com\8MAN\cfg\) using the text editor
  2. add below line before </config> 
    <options.useDirectActiveDirectorySecurity type="System.Boolean">False</options.useDirectActiveDirectorySecurity>
  3. restart the ARM Service
  4. attempt to add AD Scan again